$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json) Hash identifier: 5+imE33iaZMnjydgT0p4jB4UixzAdMS76ulFk/rlmeQ= Subject key identifier: F7:78:5F:EE:CA:05:24:74:AE:02:D4:CB:45:76:9A:EF:60:CE:3D:1C Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft Manifest number: 30 Signing time: Sat 31 May 2025 07:16:52 +0000 Manifest this update: Sat 31 May 2025 07:16:51 +0000 Manifest next update: Sat 07 Jun 2025 07:16:51 +0000 Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: nAt5AA2qPqjcsaun99eVCgKQ+41UoLYahSEawxS2qG0=) 2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Validity Not Before: May 31 07:16:51 2025 GMT Not After : Jun 7 07:16:51 2025 GMT Subject: CN=683aace4-7505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:49:27:fc:94:09:77:d7:78:c4:3e:2c:f7: d5:ee:06:52:ee:f2:16:7f:aa:b3:2b:a1:1e:0f:eb: 82:ca:b9:b4:f8:f0:a8:10:59:b7:58:ec:9b:26:cb: ed:2b:31:99:06:7e:22:8c:3c:8d:04:67:b1:48:89: 07:64:6b:2e:e9:35:a7:18:6c:9d:9e:0b:3b:fc:1d: 68:33:77:d9:1b:20:5a:17:46:0a:f6:84:42:b4:7c: 36:a3:f8:68:eb:3a:0d:f4:94:01:27:87:70:55:b9: 90:c9:c9:7a:5e:2f:47:e6:4e:49:c8:51:ed:13:8a: 12:14:fe:08:eb:2a:88:7f:04:47:89:10:30:55:2f: 0a:99:54:65:01:b2:9a:ad:f0:47:9b:b5:02:15:12: 25:31:a7:13:d0:dd:bd:a4:e6:ad:42:6e:32:f9:ff: 42:48:ae:e2:2a:71:8a:5b:38:f3:66:d5:98:26:76: 33:ef:18:bf:fb:8b:85:a5:4e:8a:92:f7:d2:fe:9d: dc:94:fe:cd:77:4b:c6:cf:86:44:83:32:3e:79:82: 30:b7:74:41:14:70:b5:97:74:d9:68:61:6c:e9:15: f5:5d:39:57:22:40:c2:c8:d8:6b:a4:e0:3c:a1:61: ee:d1:16:a9:53:fd:17:e7:49:c9:f5:fa:33:4d:c0: 07:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:78:5F:EE:CA:05:24:74:AE:02:D4:CB:45:76:9A:EF:60:CE:3D:1C X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e2:f7:5f:15:d9:a7:a3:b6:4f:cb:c9:fc:c7:93:30:4b:01: 4f:d2:30:73:ea:33:93:b2:3a:0a:b7:e9:53:f8:df:e6:7f:b6: 61:8a:d8:10:14:37:cd:45:40:70:a9:1f:e6:9b:ff:b2:73:f7: e7:da:88:62:17:09:0e:a0:00:f3:41:28:5b:39:c9:95:ba:03: 6c:2e:52:59:5d:a3:63:0c:88:2e:8b:7e:61:ad:37:f7:84:71: ee:c7:bb:1c:30:15:90:88:31:f3:70:f2:4d:42:41:10:c2:ac: 3d:db:d5:4b:e1:a8:db:13:de:2b:5a:59:28:4e:71:ff:4e:14: 64:e7:3d:7a:0e:91:c7:c0:25:a9:36:da:0c:5a:d8:30:51:12: 7d:5b:d6:49:42:e0:ac:a0:ad:10:a2:a1:35:26:a1:f2:a7:9a: 05:7e:74:32:b0:f3:35:6c:4d:6d:88:f5:36:0e:e3:2d:b1:6b: f9:0b:f6:28:ab:a0:ee:95:a5:bd:e5:ff:77:ac:a4:42:6b:20: 3d:19:44:88:f2:10:ff:e2:92:7d:dc:c4:fb:00:67:6c:ba:ee: c5:35:38:d9:f4:9d:61:35:f5:5e:52:23:f9:d4:8a:a2:09:f9: 06:00:df:2e:85:78:58:ba:86:fd:3b:fd:f3:2a:e1:cc:d5:7d: f9:71:b8:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDc2OTExMC8GA1UEBRMoMkZDQjNDMjU1NjVDOTQwNDE3QkVFMkFBRjg4MzhDRTQz M0UyQjgzQTAeFw0yNTA1MzEwNzE2NTFaFw0yNTA2MDcwNzE2NTFaMBgxFjAUBgNV BAMTDTY4M2FhY2U0LTc1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuF0kn/JQJd9d4xD4s99XuBlLu8hZ/qrMroR4P64LKubT48KgQWbdY7Jsmy+0r MZkGfiKMPI0EZ7FIiQdkay7pNacYbJ2eCzv8HWgzd9kbIFoXRgr2hEK0fDaj+Gjr Og30lAEnh3BVuZDJyXpeL0fmTknIUe0TihIU/gjrKoh/BEeJEDBVLwqZVGUBspqt 8EebtQIVEiUxpxPQ3b2k5q1CbjL5/0JIruIqcYpbOPNm1ZgmdjPvGL/7i4WlToqS 99L+ndyU/s13S8bPhkSDMj55gjC3dEEUcLWXdNloYWzpFfVdOVciQMLI2Guk4Dyh Ye7RFqlT/RfnScn1+jNNwAeBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU93hf7soF JHSuAtTLRXaa72DOPRwwHwYDVR0jBBgwFoAUL8s8JVZclAQXvuKq+IOM5DPiuDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNzY5LzU0NTY4OENBRkIy NDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDhzOEpWWmNsQVFYdnVLcS1JT001RFBpdURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NzY5LzU0NTY4OENBRkIyNDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFR WHZ1S3EtSU9NNURQaXVEby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB/i918V2aejtk/LyfzHkzBLAU/SMHPqM5OyOgq36VP43+Z/tmGK2BAU N81FQHCpH+ab/7Jz9+faiGIXCQ6gAPNBKFs5yZW6A2wuUlldo2MMiC6LfmGtN/eE ce7HuxwwFZCIMfNw8k1CQRDCrD3b1UvhqNsT3itaWShOcf9OFGTnPXoOkcfAJak2 2gxa2DBREn1b1klC4KygrRCioTUmofKnmgV+dDKw8zVsTW2I9TYO4y2xa/kL9iir oO6Vpb3l/3espEJrID0ZRIjyEP/ikn3cxPsAZ2y67sU1ONn0nWE19V5SI/nUiqIJ +QYA3y6FeFi6hv07/fMq4czVfflxuCQ= -----END CERTIFICATE-----Generated at Sat May 31 15:02:51 2025 by rpki-client